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Description 

This invention relates to apparatus for affording 
access to computer software only by authorized 
persons, and more particularly to apparatus 
physically independent of the computer equip- 
ment but capable of executing an algorithm that 
can also be executed by the computer equipment 
to afford access. 

Computer software, whether in the form of an 
operating system program or an application pro- 
gram, is typically stored in media that afford 
convenient access to a user. Exemplifying such 
media are main computer memory as well as 
peripherals such as magnetic disks, magnetic 
diskettes or magnetic tape. Software on such 
media requires substantial time and money to 
develop and it is desired in most cases to limit 
access to the software to only certain persons. 

Numerous techniques for limiting access to 
computer software are practiced. In multiuser 
systems it is typical for each user to have an 
identification code and/or a password which the 
user must enter before gaining access to the 
system. Security of the software can be com- 
promised when an authorized user reveals his or 
her identification code and/or password to unau- 
thorized persons or the access code is discovered 
by a persistent hacker. 

Another technique employed, particularly with 
respect to application software that is provided on 
magnetic diskettes, is to encode on the diskette a 
protective routine that causes the operating 
system to disable any copying facilities within it. 
This technique has had only moderate success in 
preventing unauthorized use or unauthorized 
copying because programs for disabling such 
protective routines are widely available. 

Although the above described techniques and 
the copyright laws have impeded unauthorized 
use and/or copying of computer software, the 
creators of software continue to experience 
losses as a result of the activities of unprincipled 
copiers. This had impeded the creation of soft- 
ware and the allocation of resources necessary to 
the creation of software. 

US — A — 4295039 discloses a system for afford- 
ing access by a user to a software program 
residing in a computer. The system has an access 
key which generates a password. The computer 
contains an access key verification means which 
verifies the password from the access key, and on 
that verification allows access to and use of the 
software program. The access key is transport- 
able independently of the computer. This docu- 
ment therefore corresponds to the p re-charac- 
terising part of claim 1. 

US — A — 4310720 discloses another system for 
affording access to a computer having an access 
key which generates a password from an initial 
grouping of said numbers, the password then 
being verified by suitable verification means 
within the computer. Again the access key is 
capable of being transported independently of the 
computer. 



The present invention seeks to improve such 
systems and, according to a first aspect of the 
invention, the access key includes: 

(a) pulse generating means for generating a 
5 signal that is dependent on the elapse of time; 

(b) password generating means coupled to said 
pulse generating means for generating a pass- 
word from the signal from said pulse generating 
means; 

w (c) displaying means communicating with the 
password generating means for displaying at 
least part of said password. 

Furthermore, the access key verification means 
includes: 

15 (a) means for receiving at least initially a time 
input; 

(b) means for recieving the password as 
generated by the access key and input by the 
user; 

20 (c) means for processing the time input for 
producing an internal password; 

(d) means for determining if the internal pass- 
word bears a prescribed relationship to the pass- 
word generated by said access key; 

25 (e) means for affording access to the software 
program if the prescribed relationship exists. 

In addition, according to another aspect of the 
invention there is provided an access key for 
affording access by a user to a software program, 

30 said access key comprising: 

(a) pulse generating means for generating a 
series of pulses that are dependent on the elapse 

- of time; 

(b) password generating means coupled to said 
35 pulse generating means for generating a pass- 
word for one or more pulses from said puise 
generating means; 

(c) displaying means communicating with the 
password generating means for displaying at 

40 least part of said password; 

(d) at least one sensor accessible from the 
exterior of said access key so that a coded 
stimulus is receivable by said access key; 

(e) means coupled to said sensor for decoding 
45 the stimulus number; 

(f) said password generating means for com- 
bining the stimulus number with the one or more 
pulses from the pulse generator to produce the 
password. 

so In order for the software in the computer to be 
able to produce an internal password for compari- 
son with the user input password, the user is first 
prompted by the computer to enter the current 
date. The computer manipulates the current date 

55 by an algorithm corresponding to that in the key 
to produce the internal password. 

An important aspect of the invention is that the 
shift register within the key is pre-loaded at 
manufacturing time with a unique number so that 

60 the likelihood of two keys being the same unique 
numbers is insignificant For example, if the size 
of the shift register in the key is 32 bits, a size 
easily achievable under the present state of the 
art, there are almost five billion bit combinations 

65 that can be produced. Because the key is active, 
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i.e., because a continuous supply of power is 
necessary to maintain the register state, disassem- 
bly of the key for the purposes of ascertaining the 
function is virtually impossible because in dis- 
assembly it is highly likely that power to the shift 
register would be interrupted. 

An enhanced version of a software access key 
embodying the invention, which is even more 
difficult for unauthorized persons to decode, 
involves an extra step to produce a password for 
input by the user. As in the version to which 
reference has been previously made, the key 
contains a shift register whose state changes with 
elapsed real time. The computer with which the 
key is adapted to cooperate is coded to generate a 
stimulus number which can be randomly genera- 
ted and which is saved within the host computer. 
The stimulus number is transmitted to the key 
without direct connection, one technique for so 
transmitting the stimulus number involves excita- 
tion of one or more predetermined sites on the 
video display of the host computer and providing 
in the key two or more photo-sensors which 
respond to the pattern of excitation of the sites. 
The key includes circuitry for decoding the pattern 
of excitation at the display sites and generating a 
password from a combination of the decoded 
signal and the output of the above mentioned 
register that changes with real time. In practicing 
the invention employing the enhanced version, 
the association between the password displayed 
to the user and the current date as manifested by 
the output of the timer within the key is even more 
tenuous and therefore more difficult, if not impos- 
sible, to display by reverse engineering. 

An object of the invention is to provide a 
hardware device that must be employed to gain 
access to computer software. This object is 
achieved by producing and displaying a password 
which must be input by the user and by so 
arranging the circuitry in the key that it produces, 
each time the device is used, a different password 
in accordance with an algorithm that is virtually 
impossible to predict. 

Another object of the invention is to provide a 
device of the type described above that is inexpen- 
sive, portable and longlasting. The advent of large 
scale integrated circuit technology, such as man- 
ifested in existent wristwatches and the like, 
permits a key in accordance with the invention to 
be produced at a moderate cost, particularly when 
compared to the cost of many software programs. 

A feature and advantage of the invention is that 
it employs digital techniques which afford expo- 
nential expansion of the number of possible 
combinations by merely extending by one or more 
bits the size of the numbers that the apparatus 
employs in producing a password. 

The foregoing, together with other objects, 
features and advantages, will be more apparent 
after referring to the following specification and 
the accompanying drawings, in which: 

Figure 1 is a perspective of a computer access 
key embodying the invention with portions being 
broken away to reveal internal details. 



Figure 2 is a block diagram showing the inter- 
action between a relatively uncomplex key in 
accordance with the invention and a computer 
containing code in accordance with the invention. 
5 Figure 3 is a block diagram similar to Figure 2 but 

showing an enhanced key according to the inven- 
tion. 

Figure 4 is a block diagram of exemplary cir- 
cuitry within the key of Figure 3. 
10 Figure 5 is a table showing logical states at 
various points in the circuit of Figure 4 during a 
typical operating sequence. 

Figure 6 is a block diagram of a key showing 
various enhancements in accordance with the 
is invention. 

Referring more particularly to the drawings, 
reference numeral 12 indicates a key embodying 
the present invention. The key includes a housing 
of plastic or like imperforate material which is 
20 hollow so as to define a central cavity 14. Within 
cavity 14 are elements, such as an integrated 
circuit device indicated fragmentarily at 16. 
Accessible from the exterior of the imperforate 
housing is a display 18 formed of conventional 
25 numeric or alphanumeric display elements, there 
being four numeric display elements in the 
embodiment shown in Figure 1 . Such elements are 
typically liquid crystal display or LCD elements. In 
the specific example seen in Rgure 1 display 18 
30 displays the password or a displayed character 
representation "1854." 

The top^surface of key 12 is formed with a - 
circular recess 20. The bottom surface of the recess 
contains one or more contact points 22, or open- 
35 ings in alignment with contact points within cavity 
14, for establishing electrical contact with the 
circuitry 16 within the key. The contact points are 
employed when the key is set or initialized during 
manufacture to load a code or bit pattern that is 
40 unique to each user. After the key has been so set, 
a disk shaped cover 24 is installed in recess 20 to 
insulate contacts 22. Disk shaped cover 24 can be 
an adhesive backed label having an outer surface 
containing trademark or product identifying infor- 
45 mation. 

Key 12 has a front face 26. Mounted within face 
26 and accessible from the exterior of key are 
sensors 28a, 28b, 28c and 28d. In the specific 
embodiment shown in the drawings sensors 
so 28a — 28d are photoelectric diodes which respond 
to images formed on the video display screen D of 
the computer system containing software to which 
access is to be had. A fragment of video display 
screen D is shown at reduced scale in Figure 1. As 
55 will be described subsequently, predetermined 
sites S on the screen are excited in an appropriate 
time-space pattern to produce a signal that is 
received by key 12 by way of sensors 28a — 28d. 
The sensors and the sites on the computer video 
60 display exemplify an information transmission 
linkthat uses radiant energy and not direct connec- 
tion between the key and the computer. Other 
useful forms of radiant energy are sonic energy or 
radio frequency energy. 
65 Referring to Rgure 2, there is a key 12' which is 
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somewhat less complex than that shown in Fig- 
ure 1 in that key 12' is not equipped with sensors 
28a — 28d. Key 12 includes a crystal controlled 
putse generator 30 that produces a series of 
timing pulses that count real time. In one device 
designed in accordance with the invention, pulse 
generator 30 produces one pulse per day. The 
timing pulses supplied by pulse generator 30 are 
coupled to a password generator 32. The pass- 
word generator produces a unique combination 
of binary digits depending on the number of date 
pulses that have been supplied to it by pulse 
generator 30 since initialization. Thus the binary 
bit pattern produced by password generator 32 is 
a function of the current date, referred to in this 
description and in Figure 2 as f (date). 

As will be described in more detail hereinafter 
in connection with the embodiment of Figures 3 
and 4, password generator 32 can be embodied in 
a shift register into which pulses from pulse 
generator 30 are introduced serially and which 
produces a bit pattern representing f'(date) at 
parallel outputs. The specific number of bits 
produced by the password generator depends 
more on the number of keys that are to be 
distributed than circuit capabilities. Because the 
active components of key 12' are formed of large 
scale integrated circuits, a virtually unlimited 
number of bits can be provided in a very small 
volume. 

At least some of the parallel outputs of pass- 
word generator 32 are connected to a password 
display 18 which, in one device designed in 
accordance with the invention, is constituted by a 
plurality of LCDs. In order to limit the number of 
digits that a user must input to the computer 
containing the software to which access is 
desired, fewer bits are displayed by display 18 
than are produced by password generator 32. 

It will be seen then that key 12' produces on 
display 18 a number f (date) that is a function of 
the date. In order to render the key immune to 
reverse engineering or decoding by a persistent 
hacker, it is preferred that the function f (date) be 
such that the relation between the number of date 
pulses coupled to password generator 32 and the 
bit pattern output by the password generator not 
be an inverse relation. In order to facilitate under- 
standing of password generation, the computer 
and the program resident in it will be described. 

Reference numeral 34 indicates a computer 
containing a software program to which access is 
sought. The computer can be mainframe, mini or 
micro and includes a video display screen on 
which user prompts, indicated at 36 and 38, can 
be displayed. The computer also includes a key- 
board to afford user input, indicated schemati- 
cally at 40 and 42. 

Computer 34 contains a stored seed number 
schematically represented at 44. The value of the 
stored seed is representative of the number or 
state to which password generator 32 in the key 
has been initialized. The value of the stored seed 
uniquely associates, the key and the software 
program resident in computer 34. The computer 



also includes code for executing a password- 
generating algorithm, indicated diagrammatically 
at 46, so that the computer can produce, from the 
combination of the current date input by the user 

5 to keyboard 40 and stored seed 44, a password 
f(date) which corresponds to the password pro- 
duced in key 12' and displayed on display 18. Also 
within computer 34 is comparison logic indicated 
at 48 for comparing the password generated by 

io password generator 46 and the password input 
by the user to keyboard 42. Decision logic 49 
determines subsequent action depending on 
whether correspondence between f(date) and 
f (date) exists. Correspondence between the two 

15 passwords causes the protected software to run r 
indicated schematically at 50; inequality results in 
a screen prompt or message to the user, indicated 
at 52, and termination of the attempted access to 
the program, indicated at 54. 

20 Equality between the functions f(date) and 
f(date) is but one example of a predetermined or 
prescribed relationship between the functions. 
Another exemplary relationship involves using 
f(date) as an encryption key and f (date) as a 

25 decryption key. 

The operation of the system described to this 
point requires the user to activate computer 34 so 
that the video display requests the user via screen 
prompt 36 to input the current date to the com- 

30 puter. The user's compliance with the screen 
prompt is schematically indicated at 56, and the 
date is typed into the computer via keyboard 40. 
The date supplied to keyboard 40 is coupled to 
password generator 46 which, is alluded to pre- 

35 viously, produces a password that is a function, 
f(date), of the current date. Such password is 
applied as one input to comparator 48. Another 
consequence of a date in proper form being 
applied to the keyboard is that the computer 

40 produces via a control path 57 a second screen 
prompt, indicated at 38, which instructs the user 
to input the user's password. The password is 
produced by key 12' and displayed on display 18. 
The user's input of the password gleaned from 

45 display 18 is indicated schematically at 58, the 
password being typed into the computer key- 
board at 42. The password so typed in by the user 
is supplied as another input to comparator 48. 
The comparator 48 supplies a signal to decision 

so logic 49, and if the password f(date) generated 
within the computer by password generator 46 
corresponds to the password f'(date) input at 
keyboard 42, the software program is caused to 
run as at 50, that is, the user is afforded access to 

55 the software program, rf the comparison fails, 
decision logic 49 causes creation of a screen 
prompt indicated at 52 informing the user that 
access to the computer software is denied. 
Numerous characteristics of the present inven- 

60 tion make it difficult if not impossible, to decode 
by reverse engineering or other techniques. The 
number stored in password generator 32 is stored 
in a dynamic shift register so that attempted 
disassembly of the key, which would almost 

55 inevitably entail interruption of battery power to 



4 



7 



EP 0 172 239 B1 



8 



the shift register, will destroy the number or state 
within password generator 32. Because of the 
relation, f'(date), between the date and the pass- 
word displayed by display 18 is not an inverse 
function, a person obtaining possession of key 12' s 
cannot derive the function f'(date) from observing 
a sequence of passwords displayed on display 18. 
Within computer 34, even the most readily copy- 
able medium, a diskette, cannot be conveniently 
employed to decode the seed or the function ro 
f (date). Such is the case because the seed can be 
embedded in data or code within the diskette at a 
different location from the logic that is called to 
effect password generation in response to key- 
board input of the current date. Thus a significant is 
degree of security is afforded. 

The embodiment shown in Figures 3 and 4 
exploits sensors 28a — 28d to afford a key having 
even greater immunity to unauthorized decoding 
or reverse engineering. Referring to Figure 3, key 20 
12 includes a pulse generator 60 which is substan- 
tially identical to pulse generator 30 described 
above in connection with Figure 2 in that pulse 
generator 60 produces pulses at a rate depending 
on the elapse of real time, for example one pulse 25 
per day. The output of pulse generator 60 is 
coupled to a base word generator 62. Base word 
generator 62 is similar in many respects to pass- 
word generator 32 described in connection with 
Figure 2. Baseword generator 62 is typically 30 
embodied in a shift register having a serial input 
and plural parallel outputs. Pulses from pulse 
generator 60 are coupled to the serial input and 
the combination of the bit states at parallel output 
forms a number that is a function, g'(date), of 35 
elapsed time, i.e., the total number of pulses that 
have been produced by pulse generator 60 since 
initialization. Baseword generator 62 is initialized 
at the time of manufacture with a unique bit 
pattern; because the baseword generator is *o 
typically embodied in a silicon chip, the possible 
number of unique bit patterns is virtually unli- 
mited. The parallel outputs of baseword 
generator are coupled as one input to a password 
generator 64. The other input of password 45 
generator 64 is supplied from a stimulus number 
input 66 via sensors 28a— 28d. Password 
generator 64 produces an output that is a function 
of both the baseword, in turn a function of the 
date, and the stimulus number, such function so 
being referred to herein as h'(date, stim), "stim". 
being an abbreviation for stimulus number. The 
output of password generator 64 is a plurality of 
bit states in parallel and selected ones of the bits 
are made accessible to the user via display 18 to ss 
which the password generator output is coupled. 

Key 12 is adapted for use with a computer 
system 68 which is similar to that described 
above in connection with Rgure 2. Computer 68 
also contains software capable of executing an so 
algorithm somewhat different from that 
described previously. Computer 68 has a key- 
board; the user of the key supplies to the com- 
puter from the keyboard the current date as 
indicated at 69 and 70 and the password as ss 



indicated at 71 and 72. Computer 68 also has a 
display screen D (Figure 1), such as a video 
display, for prompting the user, screen prompts 
being illustrated in Figure 3 at 74, 76 and 78. The 
computer or the program loaded thereinto has a 
stored seed, indicated at 80, which is uniquely 
associated with the state at which baseword 
generator is initialized at manufacturing time so 
that key 12 and the medium in which the stored 
seed exits are uniquely associated throughout the 
useful life of the apparatus. 

Computer 68 also includes software code so 
that the computer can function as a baseword 
generator 82 and produce a baseword that is a 
function, g(date) of both the date input by the user 
to keyboard 70 and the stored seed 80. The output 
of baseword generator 62 in key 12 and the output 
of baseword generator 82 in computer 68 bear a 
prescribed relationship to one another, typically 
equality. There is a control path 84 from keyboard 
70 to a stimulus number generator 86 so that 
when user inputs a date to keyboard 70, stimulus 
number generator 86 is activated to produce an 
output which can be a random or arbitrarily 
varying number. The stimulus number produced 
by stimulus number generator 86 is utilized in two 
ways. First the stimulus number is saved as one 
input to a password generator 88. Second the 
stimulus number is processed by the computer to 
produce a time-space pattern on screen sites S for 
transmission of information that can be sensed by 
sensor 28a — 28d. The user can place key 12 
adjacent the computer display such that sensor 
28a — 28d are excited by radiation from the screen 
sites so that a signal representative of the output 
of stimulus number generator 86 is applied to 
password generator 64 in the key. 

Password generator 88 produces a function 
h(date, stim) which bears a prescribed relation- 
ship to the password produced by password 
generator 64, equality being the typical relation- 
ship. The password displayed on display 18 is 
input to computer 68, element 71 representing the 
user's input and element 72 representing recep- 
tion at the computer keyboard of the password. 
The password input by the user and the password 
generated by password generator 88 are com- 
pared by the computer which is coded so as to 
form a comparator 92. There is decision logic 94 
within computer 68, and if correspondence 
between the computer generated password and 
the user input password is detected, the software 
program to which access is to be controlled is run 
as indicated at 96. If, to the contrary, lack of 
correspondence between the two passwords is 
detected, a screen message is produced, as indi- 
cated at 78, and access to the software program is 
denied, indicated at 98. 

In further explanation of the construction of key 
12, reference is made to Rgure 4. In Figure 4 
discrete logical elements are shown solely for the 
purpose of illustration, because the preferred 
embodiment of the invention incorporates the 
circuit functions within one or more silicon chips. 
In Rgure 4, at the upper portion thereof, are four 
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data type flip-flops 100a, 100b, 100c and 100d. 
The flip-flops form a shift register having four 
outputs identified at 102a, 102b, 102c and 102d. 
The state of the flip-flops 100a — lOOd, and there- 
fore the bit pattern appearing at outputs 
102a — 102d, remains constant throughout the life 
of the key, and after initialization uniquely iden- 
tifies a single user. Although four flip-flops pro- 
vide only sixteen combinations of unique num- 
bers or functions it is reiterated that Figure 4 is for 
the purpose of illustration and is not for the 
purpose of limitation. 

As will appear, the state of flip-flops 
100a — 100d defines the function g' referred to 
previously in connection with element 62 of Fig- 
ure 3 to which the timing pulses from pulse 
generator 60 are subjected to produce the 
baseword g'(date). Parallel outputs 102a — 102d 
are connected as inputs to respective AND gates 
104a, 104b, 104c and 104d. 

The outputs of AND gates 104a — 104d are gated 
to the input of respective data type flip-flops 106a, 
106b, 106c and 106d. Flip-flops 106a— 106d have 
clock inputs to which the output of puise 
generator 60 is coupled; in Figure 4 pulse 
generator 60 is shown as a crystal controlled 
oscillator that constitutes a system clock 60a 
which produces system clock pulses at a rela- 
tively high rate and a divider circuit 60b which 
divides the relatively high frequency pulses pro- 
duced by the system clock so that the output of 
the divide circuit provides a pulse at a repetition 
rate of one per day. Divide circuit 60b is coupled 
to the clock inputs of flip-flops 106a — 106d 
through an AND age 107 and an OR gate 108. 
Each AND gate 104a — 104d includes a second 
input to which is coupled the Q output of flip-flop 
106d. The outputs of AND gates 104a — 104d thus 
depend on the state of flip-flop 106d and the 
states of respective flip-flops 100a — lOOd. The D 
inputs of flip-flops 106b — 106d are supplied 
through respective XOR gates 109b, 109c and 
109d which have one input coupled to respective 
AND gates 104b — 104d and another input coupled 
to the output of the preceding flip-flop, namely: 
106a — 106c, respectively. The input to flip-flop 
106a is supplied by AND gate 104a through AND 
gate 110 and an OR gate 112. After initialization 
during manufacture, AND gate 110 is con- 
tinuously enabled so that during the life of key 12 
operation occurs as though AND gate 104a were 
directly connected to the D input of flip-flop 106a. 

Rip-flops 100a — lOOd together with AND gates 
104a — 104d and XOR gates 109b — 109d cooper- 
ate to produce the function g'(date). Thus flip- 
flops 106a — 106d have respective outputs 
114a — 114d the bit pattern of which corresponds 
to the baseword, g'(date). As such the bit pattern 
appearing on outputs 114a — 114d changes once 
each day to a number that is the function of the 
number of pulses supplied by divider circuit Ob 
and the state stored in flip-flops 100a — 100d 

The baseword is coupled to a pass jrd 
generator 64 which includes data type flip rops 
116a, 116b, 116c and 116d. There are four XOR 



gates 118a, 118b, 118c and 118d, each of which 
has one input driven by the respective Q outputs 
of flip-flops 106a — 106d and the other input 
driven by respective flip-flops 116a — 116d. The 

5 output of XOR gate 1 18a is coupled to the D input 
of flip-flop 116b, the output of XOR gate 118b is 
coupled to the D input of flip-flop 1 16c, the output 
of XOR gate 1 18c is coupled to the D input of flip- 
flop 116d and the output of XOR gate 118d is 

io coupled to the D input of flip-flop 116a through an 
XOR gate 120. To the other input of XOR gate 120 
via a circuit path 122 is coupled the stimulus 
number received by sensors 28a — 28d and 
indicated in Figure 3 at 66. 

is Two sensors, such as sensor 28a and 28d are 
shown in Figure 4. The other two sensors, 28b 
and 28c, are omitted for simplicity because their 
outputs are handled in substantially the same 
manner as is the output of sensor 28a. The 

20 sensors are biased by pul! up resistors R which 
are connected to the positive terminal of the 
battery power supply within key 12. The outputs 
of the sensors constitute inputs to an input buffer 
register 124. Buffer register 124 is a FIFO register. 

25 The register has a plurality of data inputs one of 
which is shown coupled to the output of sensor 
28a and a clock input shown coupled to the output 
of sensor 28b. The buffer register has a Q output, 
on which data appears, and a clock output. The 

30 data and clock outputs of input register 124 are 
coupled to a sync detector and counter 126. Sync 
detector 126 is a well known circuit which detects 
a prescribed pattern and number of signals sup- 
plied to it from buffer register 124 to ascertain 

3$ when a data signal, in contrast to noise or the like, 
has been applied to the sensors. When ascertain- 
ment of data signals is made, sync detector 
supplies via a circuit path 128 an enable signal to 
input register 124. In response to receipt of an 

40 enable signal, the input register supplies data to 
XOR gate 120 via circuit path 122. Sync detector 
and counter 126 includes a counter which counts 
a prescribed number of pulses (four in the exem- 
plary circuit of Figure 4) and applies an enable 

45 signal on circuit path 128 for a period corre- 
sponding to the duration of the prescribed 
number of pulses. There is an inverter 129 
coupled from circuit path 128 to the reset inputs 
of flip-flops 116a — 116d. When there is no enable 

50 signal on circuit path 128, the action of inverter is 
such as to reset flip-flops 116a — 116d so that the 
state of their respective outputs is 0. When a 
stimulus number of proper format is received, the 
enable signal is asserted and the reset signal to 

55 flip-flops 116a — 116d is discontinued so that the 
stimulus number can be loaded into the shift 
register constituted by the latter flip-flops. 

The bits appearing at the outputs of flip-flops 
116c and 116d are displayed to the user on 

60 display 18. Because Figure 4 has been reduced 
and simplified for the purposes of clarity of 
description, the output of only two of the flip-flops 
that constitute a part of password generator 64 
are employed. In actual practice, as has been 

65 stated previously, more than two bits are 
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employed and more than one digit is displayed on 
display 18. 

Before summarizing the operation of the circuit 
of Figure 4, initialization of the circuit will be 
described. Initialization occurs either at the time 
of manufacture or at some subsequent time when 
the key is to be introduced into commerce in 
combination with a specific computer software 
program to which access is to be limited. In the 
embodiment shown in Fgure 4, there are three 
inputs to which connection is necessary for 
initialization. Such inputs have been previously 
identified in connection with Figure 1 as contact 
points 22. One initialization input 22a, a data 
input, is coupled directly to the D input of flip-flop 
100a. A second initialization input 22b, a clock 
input, is coupled to the clock inputs of flip-flops 
106a— 106d through a gating circuit A third 
initialization input 22c, a load enable input, is 
directly coupled to one input of each of two AND 
gates 136 and 137 and is coupled through an 
inverter 138 to one input of each of two AND 
gates 107 and 110. The other input of AND gate 
136 is coupled to the Q output of flip-flop 100d. 
The other input of AND gate 137 is coupled to 
clock input 22b. The outputs of AND gates 110 
and 136 constitute the inputs to OR gate 112. 
During initialization only AND gates 136 and 137 
are active because the load enable signal applied 
to initialization input 22c and inverted by inverter 
138, disables AND gates 107 and 110. 

In order to initialize the key, that is, to load into 
the shift register formed by flip-flops 100a— 100d 
a permanent, unique number, an enable signal is 
first applied to load enable input 22c. The enable 
signal is a voltage level that corresponds to a 
logical 1. A serial bit pattern is then applied to 
data input 22a and a clock pulse signal, at a rate 
substantially in excess of that produced by divider 
circuit 60b, is applied to clock input 22c until flip- 
flops 100a— 100d are loaded with the desired 
permanent bit pattern and flip-flops 106a — 106d 
are loaded with an initial bit pattern. Thereafter 
connections to initialization inputs 22a, 22b and 
22c are broken and the key is ready for use. 
Operation of key 12 will be described by using an 
example in which the bit pattern loaded into flip- 
flops 100a — 100s is 0101, and the bit pattern 
initially loaded into flip-flops 106a— 106d is 1100. 
Because flip-flops 116a — 116d are reset prior to 
each introduction of a stimulus number, their 

respective Q outputs are set to a logical 0 state. 

The output of password generator 64 is consti- 
tuted by the outputs of flip-flops 116c and 116d 
which are coupled to display 18. The outputs of all 
flip-flops constituting password generator 64 are 

defined by the following equations: 

Qit6.<t+U=stim(t) XOR (Qnod(t) XOR Q 106d ) 
Qiieb(t+1)=Qn6.(t> XOR Q 10 6«{t) 
Q 1n6e (t+1)=Qn6b<t) XOR QioeJt) 
Qiied(t+1)=Qnec(t) XOR Q 10 ec(t) 

In the above formulas Q(t) represents the state of 
the indicated parameter before a clock pulse is 



supplied by buffer register 124 to the flip-flops, 
the parameter Q(t+1) represents the state after 
such clock pulse, and the parameter stim 
represents the value of a bit in the stimulus 

5 number by sensors 28a — 28d and processed by 
buffer register 124. 

Referring to the table of Figure 5, rows 140 
show a typical number permanently stored in the 
shift register constituted by flip-flops 100a — 100d. 

10 Rows 142 show the number stored in the shift 
register constituted by flip-flops 106a — 106d 
immediately after initialization, i.e., during day 0 
in the operating life of the key. Rows 144 show 
that upon reset, the output of password generator 

is 64, constituted by flip-flops 1 16a— 1 16d, is consti- 
tuted by all logical 0s. The next group 146 of four 
rows shows the outputs of flip-flops 116a — 116d 
as each digit of a stimulus number 1110 is 
detected by sensors 28a — 28d, processed by buf- 

20 fer register 124, and supplied to password 
generator 64 via circuit path 122. Upon comple- 
tion of processing of the stimulus number, dis- 
play 18 displays a number representative of 
binary 11 and indicated at 18,. 

25 Row group 148 shows the processing of a 
subsequent stimulus number, in this case 0100. 
The password displayed to the user by display 18 
is representative of binary 10, indicated at I82. 
When a timing pulse is produced by system 

30 clock 60a and divider 60b, the output states of flip- 
flops 106a — 106d are changed, the new states 
being a function of the prior states of those flip- 
flops and the number permanently stored in flip- 
flops 100a — 100d. Rows 150 show the state of flip- 

35 flops 106a— 106d at day 1. If during day 1 the user 
wishes to use the device and if a stimulus number 
1111 is produced by the computer system and 
received by sensors 28a — 28d, indicated at row 
group 152, display 18 will display a number 

40 representative of binary 11, indicated at 183 in 
Figure 5. 

The sequence of operation described above 
demonstrates that the password displayed to the 
user changes on a daily basis and changes for 

45 each stimulus number received from the com- 
puter system with which the device is used. 
Because the relation between the number per- 
manently stored in flip-flops 100a — 100d and the 
password characters displayed to the user Is not 

so an inverse relation, it is virtually impossible for 
even the legitimate possessor of the key to 
deduce the permanently stored number of the 
function or algorithm that is employed to gener- 
ate the displayed password characters. 

55 To afford further insight into the apparatus of 
Figures 3 and 4, the following pseudo code is 
presented to illustrate cooperation of a computer 
in which resides a program to which access is 
sought by a user and a key embodying the 

60 invention: 

1) Prompt user for date; 

2) Accept date from user; 

3A) Compute internal baseword from date and 
stored seed; 
65 3B) Generate stimulus number; 
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3C) Transmit stimulus number to user and save 
stimulus number; 

3D) Compute internal password from internal 
baseword and saved stimulus number; 

4) Prompt user for password; 

5) Accept password from user; 

6) Compare user password and interna! pass- 
word; 

7) Initiate program execution if equal. 

In the embodiment of the invention described 
in more detail in connection with Figure 2, the 
steps identified above as 3A — 3D are combined 
and simplified to produce apparatus that affords 
security against unauthorized access to a some- 
what lesser degree than the embodiment of the 
invention shown in Figures 3 and 4. 

The elements in Figure 6 that are identical to 
similar elements in Rgure 3 bear identical ref- 
erence numerals to those employed in Figure 3. 
There is a pulse generator 60 which produces an 
output each day or like constant time interval. The 
timing pulse is coupled to baseword generator 62 
where it is used as previously described. The 
baseword generated by baseword generator 62 is 
coupled to a password generator 64. Also coupled 
to password generator 64 is a stimulus number 
input from the video display via sensors 
28a — 28d, reception and processing of the 
stimulus number being indicated at 66. Password 
generator 64 produces a password that is dis- 
played to the user on display 18 and the user 
inputs the password to the computer to obtain 
access to the protected software within the 
computer. 

There are certain instances where the owner of 
software may desire to limit the usage made of 
the software. One form of limited usage is to 
permit the software user to access the software a 
specific number of times. To afford this mode of 
operation one enhancement in the device shown 
in Figure 6 is a usage counter 200. The usage 
counter is typically loaded at initialization time 
with a number equal to the authorized number of 
uses of the software. Each time a stimulus 
number is received and processed, as at 66, a 
pulse is applied to the usage counter via a signal 
path 202 to decrement the counter. When the 
counter is ultimately decremented to 0 the 
counter produces a disable signal on a signal path 
204. The disable signal is coupled to password 
generator 64, and when the disable signal occurs, 
password generator 64 is disabled. Usage counter 
has an initialization input 22d so that at the time of 
initialization, the number of times for authorized 
usage can be loaded into the counter. Input 22d is 
accessible from a contact point 22 (Figure 1). 

Another technique for limiting the usage of the 
software program is to place a time limit on the 
usage rather than a usage limit. For this purpose 
there is a time limit counter 206 which is loaded to 
some initial count indicating the number of days 
of authorized usage, there being an initialization 
input 22e for this purpose. A timing pulse from 
pulse generator 60 is supplied via a signal path 
208 to time limit counter 206 each time a pulse is 



produced by pulse generator 60, e.g. one pulse 
per day. When the count stored in time limit 
counter reaches 0, a disable signal is produced on 
signal path 204 which disables password 
s generator 64 and prevents further access to the 
program. 

In the interest of completeness a power supply 
in the form of a battery 210 is shown in Figure 6. 
Such battery is also provided for the key shown in 

10 the other figures but it is not shown in the other 
figures in the interest of simplicity and clarity. 
Suffice it to say that the battery is connected to 
each of the elements within the circuit, the con- 
nections being indicated by an input lead having a 

is plus sign, "+," adjacent the distal end thereof. 

Thus it will be seen that the present invention 
provides a device that affords security against 
unauthorized access to computer software pro- 
grams. Because the date represented by the 

20 cumulative number of pulses produced since 
initialization and the stimulus number are each 
modified according to one or more functions in 
producing a password visible to the user and 
because each function is not palpable, ascertain- 

25 ment of the password by reverse engineering or 
like analysis is so difficult as to be virtually 
impossible. The device is highly portable, con- 
venient to use and relatively inexpensive to pro- 
duce. In addition use of the device rs convenient 

30 because no connection to or modification of the 
computer system is required. 

Claims 

35 1. A system for affording access by a user to a 
software program residing in a computer (34), 
comprising an access key (12) capable of generat- 
ing a password and of being transported indepen- 
dently of the computer (34, 68) and an access key 

40 verification means adapted to be resident in the 
computer (34, 68) for verifying a password 
generated by the access key (12) and allowing 
access and use to the software program; charac- 
terised in that: 

45 said access key (12) includes: 

(a) pulse generating means (30, 60) for generat- 
ing a signal that is dependent on the elapse of 
time; 

(b) password generating means (32, 64) 
so coupled to said pulse generating means (30, 60) 

for generating a password from the signal from 
said pulse generating means (30, 60); 

(c) displaying means (18) communicating with 
the password generating means (32) for display- 

55 ing at least part of said password; and 

said access key verification means includes: 

(a) means (40, 70) for receiving at least initially a 
time input; 

(b) means (42, 72) for receiving the password as 
60 generated by the access key (12) and input by the 

user; 

(c) means (46, 88) for processing the time input 
for producing an internal password; 

(d) means (48, 49; 92, 94) for determining if the 
65 internal password bears a prescribed relationship 
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to the password generated by said access key 
(12); 

(e) means (50, 96) for affording access to the 
software program if the prescribed relationship 
exists. 

2. A system according to claim 1 wherein: 
said pulse generating means (30, 60) includes 

means for generating in accordance with a pre- 
scribed algorithm a password comprised of a 
character string; and 

said displaying means (18) includes means for 
displaying at least one character representative 
of said character string. 

3. A system according to claim 1 or claim 2, 
wherein the computer has a video display (D), 
which can display another signal from the access 
key verification means, and wherein: 

said access key verification means further 
includes: 

(a) a stimulus number generating means (86) 
for generating a stimulus number; 

(b) means for generating another signal on the 
video display (D) that is representative of said 
stimulus number; and 

said access key further includes: 

(a) at least one sensor (28) accessible from the 
exterior of said access key so that juxtaposition 
of the access key (12) and the display (D) affords 
excitation of the sensor (28) by the another 
signal; 

(b) means (66) coupled to said sensor (28) for 
decoding the another signal to produce the 
stimulus number; 

(c) said password generating means (62, 64) 
including a baseword generating means (62) 
communicating with said pulse generating 
means (60) for producing a baseword that is a 
function of the signal produced by said pulse 
generating means (60); 

(d) said password generating means (62, 64) 
including a means (64) for combining the 
stimulus number with the baseword to produce 
the password. 

4. A system according to claim 3 wherein said 
access key (12) includes: 

means (200) for counting each time said sen- 
sor is excited by the another signal on the video 
display; and 

means (206) for disabling said access key 
when the count on the counting means reaches a 
predetermined count. 

5. A system according to claim 1 or claim 2, 
wherein the computer has a display, which can 
display another signal from the access key verifi- 
cation means, and wherein: 

said access key verification means further 
includes: 

(a) a stimulus number generating means for 
generating a stimulus number; 

(b) means for generating another signal on the 
computer display that is representative of said 
stimulus number; and 

said access key further includes: 
(a) means for entering and decoding the 
another signal to produce the stimulus number; 



(b) said password generating means including 
a baseword generating means communicating 
with said pulse generating means for producing 
a baseword that is a function of the signal pro- 

s duced by said pulse generating means; 

(c) said password generating means including 
a means for combining the stimulus number 
with the baseword to produce the password. 

6. A system according to claim 1 or claim 2, 
w wherein said access key includes: 

said signal from the pulse generating means 
providing a series of pulses; 

a time limit counter means for counting 
pulses; 

is means for coupling said time limit counter 
means to said pulse generating means to count 
the number of pulses generated thereby; and 

means for disabling said key when said time 
limit counter has counted a predetermined 

20 number of pulses from said pulse generating 
apparatus. 

7. A system according to claim 1, or claim 2, 
wherein said password generating means of said 
access key comprises: 

25 (a) a first register initialized to a fixed state that 
uniquely identifies the access key; 

(b) a second register for selectively retaining 
the signal from the pulse generating means; 

(c) means for coupling said pulse generating 
30 means to said second register; 

(d) means for gating outputs of said first and 
second registers to produce said password; and 
said access key verification means includes: 

(a) means for being initialized to a fixed state 
35 uniquely associated with the fixed state of said 
first register of said access key. 

8. A system according to claim 7 with the 
computer having a video display which can dis- 
play another signal from the access key verifica- 

40 tion means, wherein: 

said access key verification means includes: 

(a) means for generating a stimulus number; 

(b) means for generating another signal on the 
video display that is representative of said 

45 stimulus number; 

said access key includes: 

(a) at least one sensor accessible from the 
exterior of said access key so that juxtaposition 
of the access key and the display affords excita- 

so tion of the sensor by the another signal; 

(b) a third register for selectively retaining the 
another signal on the video display; 

(c) means for communicating the sensor to 
said third register so that the another signal can 

55 alter the state of the third register in accordance 
with the stimulus number; and 

(d) said gating means includes means for 
gating an output from said third register with the 
output from said first and second registers to 

so produce said password. 

9. A system according to claim 7 wherein said 
access key includes: 

a plurality of contacts means accessible from 
the exterior of said access key for initializing said 
65 access key; 
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means for coupling one of said contacts to 
said first register and another of said contacts to 
said second register; and 

means for rendering the contacts immune to 
reinitialization. 

10. A system according to claim 9 wherein 
said rendering means includes means for 
insulating said contacts after initialization. 

11. A system according to claim 9, or claim 
10, wherein said access key includes: 

a third contact; 

means for communicating said third contact 
with said gating means; 

wherein said gating means includes means 
for enabling said first and second registers 
responsive to an initialization signal being 
applied to said third contact. 

12. A system according to claim 1 or claim 2, 
wherein the computer has a video display which 
can display another signal from the access key 
verification means, wherein: 

said access key verification means includes: 

(a) a stimulus number generating means for 
generating a stimulus number; 

(b) means for generating another signal on 
the video display that is representative of said 
stimulus number; and 

said access key includes: 

(a) at least one sensor accessible from the 
exterior of said access key so that juxtaposition 
of the access key and the display affords excita- 
tion of the sensor by the another signal; 

(b) means coupled to said sensor for decoding 
the another signal to produce the stimulus 
number; 

(c) said password generating means including 
a means for combining the stimulus number 
with the signal from the pulse generator to pro- 
duce the password. 

13. A system according to claim 1 or claim 2, 
wherein the computer has a display which can 
display another signal from the access key 
verification means, and wherein: 

said access key verification means includes: 

(a) a stimulus number generating means for 
generating a stimulus number; 

(b) means for generating another signal on 
the computer display that is representative of 
said stimulus number; and 

said access key includes: 

(a) means for entering and decoding the 
another signal to produce the stimulus number; 

(b) said password generating means including 
a means for combining the stimulus number 
with the signal from the pulse generator to pro- 
duce the password. 

14. A system according to claim 1, wherein 
the password generating means of the access 

key is adapted to generate the password by 
encription of the signal from the pulse generat- 
ing means, and 

the means of the access key verification 
means for processing the time input is adapted 
to decrypt the password, so that the internal 
password is a decrypted password. 



15. A system according to claim 14, wherein 
the computer has a video display which can 
display another signal from the access key ver- 
ification means, and wherein: 

5 said access key verification means includes: 

(a) a stimulus number generating means for 
generating a stimulus number; 

(b) means for generating another signal on 
the video display that is representative of said 

w stimulus number; and 

said access key includes: 

(a) at least one sensor accessible from the 
exterior of said access key so that juxtaposition 
of the access key and the display affords excita- 

15 tion of the sensor by the another signal; 

(b) means coupled to said sensor for decoding 
the another signal to produce the stimulus 
number; 

(c) said password generating means including 
20 a means for encrypting the stimulus number 

with the signal from the pulse generating means 
to produce the password. 

16. A system according to claim 15 including: 
means for counting each time said sensor is 

25 excited by the video display of the computer; 

means for disabling the access key when the 
counter reaches a predetermined count. 

17. A system according to claim 14, wherein 
the computer has a display which can display 

30 another signal from the access key verification 
means, and wherein: 
said access key verification means includes: 
(a) a stimulus number generating means for 
generating a stimulus number; 
35 (b) means for generating another signal on 
the computer display that is representative of 
said stimulus number; and 
said access key includes: 

(a) means for entering and decoding the 
40 another signal to produce the stimulus number; 

(b) said password generating means including 
a means for encrypting the stimulus number 
with the signal from the pulse generating means 
to produce the password. 

45 18. An access key (12) for affording access by 
a user to a software program, said access key 
comprising: 

(a) pulse generating means (60) for generating 
a series of pulses that are dependent on the 

so elapse of time; 

(b) password generating means (62, 64) 
coupled to said pulse generating means for 
generating a password for one or more pulses 
from said pulse generating means (60); 

55 (c) displaying means (18) communicating with 
the password generating means (62, 64) for dis- 
playing at least part of said password; 

(d) at least one sensor (28) accessible from 
the exterior of said access key (12) so that a 

60 coded stimulus is receivable by said access key 
(12); 

(e) means (60) coupled to said sensor for 
decoding the stimulus number; 

if) said password generating means for com- 
es bining the stimulus number with the one or 
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more pulses from the pulse generator (60) to 
produce the password. 

19. An access key according to claim 18 wherein 
said password generating means (62, 64) includes 
a baseword generating means (62) communicat- 
ing with said pulse generating means (60) for 
producing a baseword that is a function of pulses 
produced by said pulse generating means (60); 
and 

said password generating means (62, 64) fur- 
ther includes a means (64) for combining the 
stimulus number with the baseword to produce 
the password to afford a user access to a software 
program. 

20. An access key according to claim 18, or 
claim 19 wherein said access key includes: 

a time limit counter means for counting pulses; 

means for coupling said time limit counter 
means to said pulse generating means to count 
the number of pulses generated thereby; and 

means for disabling said access key when said 
time limit counter has counted a predetermined 
number of pulses from said pulse generating 
apparatus. 

Patentanspruche 

1. System zur Schaffung des Zugangs durch 
einen Benutzer zu einem in einem Rechner (34) 
untergebrachten Softwareprogramm, umfassend 
einen Zugangsschlussel (12), der fahig ist, ein 
Kennwort zu erstellen und unabhangig vom Rech- 
ner (34, 68) transportiert zu werden und eine 
ZugangsschlOssel-Nachprufungseinrichtung, die 
dazu ausgebildet ist, im Rechner (34, 68) unterge- 
bracht zu werden, um ein Kennwort nachzu- 
prufen, das vom Zugansschlussel (12) erstellt ist 
und den Zugang zum und die Verwendung des 
Softwareprogramms zuzulassen; dadurch 
gekennzeichnet daS 

der genannte Zugangsschlussel umfaBt: 

(a) Impulsgebereinrichtungen (30, 60) zur 
Erzeugung eines Signals, das vom Zeitablauf 
abhangig ist; 

(b) Kennworterstellungseinrichtungen (32, 64), 
die mit den genannten Impulsgebereinrichtungen 
(30, 60) gekoppelt sind, um ein Kennwort aus dem 
von den genannten Impulsgebereinrichtungen 
(30, 60) erzeugten Signal zu erstellen; 

(c) eine Sichtanzeigeeinrichtung (18), die mit 
der Kennworterstellungseinrichtung (32) verbun- 
den ist, um wenigstens einen Teil des genannten 
Kennwortes anzuzeigen; und 

die genannte Zugangsschlusselnachprufungs- 
einrichtung umfassend: 

(a) Einrichtungen (40, 70) zum zumindest 
anfangiichen Empfang einer Zeiteingangsgro&e; 

(b) Einrichtungen (42, 72) zum Empfang des 
vom Zugangsschlussel (12) erstellten und vom 
Benutzer eingegebenen Kennwortes; 

(c) Einrichtungen (46, 88) zur Verarbeitung der 
ZeiteingangsgrdSe, um ein internes Kennwort zu 
erstellen; 

(d) Einrichtungen (48, 49; 92, 94) zur Bestim- 
mung, ob das interne Kennwort in einem vorge- 



schriebenen Verhaltnis zu dem von dem genann- 
ten Zugangsschlussel (12) erstellten Kennwort 
steht; 

(e) Einrichtungen (50, 96) zur Herstellung des 
5 Zugangs zum Softwareprogramm, wenn das vor- 
geschriebene Verhaltnis besteht. 

2. System nach Anspruch 1, worin 

die genannten Impulsgebereinrichtungen (30, 
60) Einrichtungen zur Erstellung eines Kennwor- 
10 tes aus einer Zeichenreihe gemaS einem vorge- 
schriebenen Aigorithmus umfassen, welches 
Kennwort aus einer Zeichenreihe besteht; und 

die genannte Sichtanzeigeeinrichtung (18) Mit- 
tel zur Sichtanzeige wenigstens eines fur die 
15 genannte Zeichenreihe reprasentativen Zeichens 
aufweist. 

3. System nach Anspruch 1 oder 2, worin der 
Rechner eine Videsichtanzeige (D) aufweist, die 
ein anderes Signal von der Zugangsschlussel- 

20 nachprufungseinrichtung anzeigen kann, und 
worin 

die genannte ZugangsschlOsselnachprufungs- 
einrichtung weiters umfaSt: 

(a) eine Anregungsimpulszahlerzeugungsein- 
25 richtung (86) zur Erzeugung einer Anregungsim- 

pulszahl; 

(b) eine Einrichtung zur Erzeugung eines ande- 
ren Signals auf der Videosichtanzeige (D), das 
repreasentativ fur die genannte Anregungsim- 

30 pulszahl ist; und 

der genannte Zugangschlussel weiters umfas- 
send: 

(a) wenigstens einen Sensor (28), der von 
au&erhalb des genannten Zugangschlussels 

35 zuganglich ist, sodaB eine Gegenuberstellung des 
Zugangsschlussels, und der Sichtanzeige (D) die 
Erregung des Sensors (28) durch das andere 
Signal bewirkt; 

(b) eine Einrichtung (66), die mit dem genann- 
40 ten Sensor (28) gekoppelt ist, um das andere 

Signal zu dekodieren und die Anregungsimpuls- 
zahl zu erzeugen; 

(c) die genannte Kennworterstellungseinrich- 
tung (62, 64) umfassend eine Basisworterstel- 

45 lungseinrichtung (62), die mit der genannten 
Impulsgebereinrichtung (60) in Verbindung steht, 
um ein Basiswort zu erstellen, das eine Funktion 
des Signals ist, das von der genannten Impulsge- 
bereinrichtung (60) erzeugt wird; 

so (d) die genannte Kennworterstellungseinrich- 
tung (62, 64) umfassend ein Mittel (64) zum 
Kombinieren der Anregungsimpulszahl mit dem 
Basiswort, um das Kennwort zu erstellen. 

4. System nach Anspruch 3, worin der genannte 
55 Zugangsschlussel (12) umfa&t: 

eine Einrichtung (200) zum Zahlen jedes Males, 
zu dem der Sensor durch das andere Signal auf 
der Videosichtanzeige erregt wird; und 
eine Einrichtung (206) zum Sperren des 
60 genannten Zugangsschlussels, wenn die ZShlung 
auf der Zahteinrichtung einen vorgegebenen Wert 
erreicht. 

5. System nach Anspruch 1 oder 2, worin der 
Rechner mit einer Sichtanzeige versehen ist, die 

65 fahig ist, ein anderes Signal der Zugangsschius- 
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sel nach prufungsein richtung anzuzeigen, und 
worin 

die genannte Zugangsschiusselnachprufungs- 
einrichtung weiters umfaSt: 

(a) eine Anregungsimpulszahlerzeugungsein- 
richtung zum Erzeugen einer Anregungsimpuls- 
zaht; 

(b) eine Einrichtung zur Erzeugung eines 
anderen Signals auf der Rechnersichtanzeige, 
das reprasentativ fur die genannte Anregungs- 
impulszahl ist; und 

der genannte Zugangsschlussel weiters 
umfassend: 

(a) eine Einrichtung zum Eingeben und Deko- 
dieren des anderen Signals, um die Anre- 
gungsimpulszahl zu erzeugen; 

(b) die genannte Kennworterstellungseinrich- 
tung umfassend eine Basisworterstellungsein- 
richtung, die mit der genannten Impulsgebe- 
reinrichtung in Verbindung stent, um ein Basis- 
wort zu erstellen, das eine Funktion des 
Signals ist, das von der genannten Impulsge- 
bereinrichtung erzeugt wird; 

(c) die genannte Ken nworterstei I ungsein rich- 
tun g weiters umfassend eine Einrichtung zum 
Kombinieren der genannten Anregungsimpuls- 
zahl mit dem Basiswort, um das Kennwort zu 
erstellen. 

6. System nach Anspruch 1 oder 2, worin 
der genannte Zugangsschlussel umfaSt: 

das genannte Signal von der genannten 
Impulsgebereinrichtung, die eine Reihe von 
Impulsen erzeugt; 

eine Zeitbegrenzungsezah (einrichtung zum 
Zahlen von Impulsen; 

eine Einrichtung zum Koppeln der genannten 
Zeitbegrenzungszahleinrichtung mit der 
genannten Impulsgebereinrichtung, um die von 
dieser erzeugte Anzahl von Impulsen zu zah- 
len; und 

eine Einrichtung zum Sperren des genannten 
Schlussels, wenn der genannte Zeitbegren- 
zungszahler eine vorgegebene Anzahl von 
Impulsen von der genannten tmpulsgebervor- 
richtung gezahlt hat 

7. System nach Anspruch 1 oder 2, worin 
die genannte Kennworterstellungseinrichtung 
des genannten ZugangsschlQssels umfa&t: 

(a) ein erstes Register, das zu einem fixierten 
bzw. festgesetzten Zustand initialisiert ist, der 
einzigartig den Zugangsschlussel identifiziert; 

(b) ein zweites Register zum selektiven Auf- 
bewahren des Signals von der Impulsgeberein- 
richtung; 

(c) eine Einrichtung zum Koppeln der 
genannten Impulsgebereinrichtung mit dem 
genannten zweiten Register; 

(d) eine Einrichtung zum Torsteuern von 
Ausgangen des genannten ersten und zweiten 
Registers, um das genannte Kennwort zu 
erstellen; und die genannte Zugangsschtussel- 
nachprufungseinrichtung umfassend: 

(a) eine Einrichtung, die zu einem fixierten 
bzw. festgesetzten Zustand initialisiert wird, der 
auf einzigartige Weise mit dem festgesetzten 



Zustand des genannten ersten Registers des 
genannten ZugangsschlQssels assoziiert ist. 

8. System nach Anspruch 7, in dem der 
Rechner mit einer Sichtanzeige versehen ist, 

5 die ein anderes Signal von der Zugangsschlus- 
sel nach pruf ungsein richtung anzeigen kann, 
worin: 

die genannte ZugangsschlusselnachprGfungs- 
einrichtung umfaSt: 
10 (a) eine Einrichtung zum Erzeugen einer 
Anregungsimputszahl; 

(b) eine Einrichtung zum Erzeugen eines 
anderen Signals auf der Videosichtanzeige, das 
reprasentativ fur die genannte Anregungsim- 
is pulszahl ist; 

der genannte Zugangsschlussel umfassend: 

(a) wenigstens einen Sensor, der von au&er- 
halb des genannten ZugangsschlQssels zugang- 
lich ist, sodaB eine Gegenubersteilung des 

20 ZugangsschlQssels und der Sichtanzeige die 
Erregung des Sensors durch das andere Signal 
bewirkt; 

(b) ein drittes Register fur die selektive Auf- 
bewahrung des anderen Signals auf der Video- 

25 sichtanzeige; 

(c) eine Einrichtung fur die Verbindung des 
Sensors mit dem genannten dritten Register, 
sodaB das andere Signal den Zustand des drit- 
ten Registers in Obereinstimmung mit der 

30 Anregungsimputszahl verandern kann; und 

(d) die genannte Torsteuerungseinrichtung 
umfassend eine Einrichtung zum Torsteuern 
eines Ausgangs vom genannten dritten Regi- 
ster mit dem Ausgang des genannten ersten 

35 und zweiten Rewgister, um das genannte 
Kennwort zu erstellen. 

9. System nach Anspruch 7, worin der 
genannte Zugangsschlussel umfaSt: 

eine Vielzahl von Kontaktein richtung en, die 
40 von der AuSenseite des genannten Zugangs- 
schlQssels zugangiich sind, um den genannten 
Zugangsschlussel zu initialiseren; 

eine Einrichtung zum Koppeln eines der 
genannten Kontakte mit dem genannten ersten 
45 Register und eines anderen der genannten 
Kontakte mit dem genannten zweiten Register; 
und 

eine Einrichtung, um die Kontakte immun 
gegen Reinitialisierung zu machen. 
so 10. System nach Anspruch 9, worin die 

genannte Einrichtung zum Immunisieren der 
Kontakte eine Einrichtung zum Isolieren der 
genannten Kontakte nach der Initialisierung 
umfaBt. 

55 11. System nach Anspruch 9 oder 10, worin 
der genannte Zugangsschlusel umfa&t: 
einen dritten Kontakt; 

eine Einrichtung zum Verbinden des genann- 
ten dritten Kontaktes mit der genannten Tor- 
so st euerungse in richtung; 

worin die genannte Torsteuerungseinrichtung 
eine Einrichtung zur Freigabe des genannten 
ersten und zweiten Registers a Is Reaktion auf 
ein an den genannten dritten Kontakt angeleg- 
65 tes Initialisierungssignal umfaBt. 
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12. System nach Anspruch 1 oder 2, worin der 
Rechner eine Videosichtanzeige besitzt, die ein 
anderes Signal von der ZugangsschlGssel-nach- 
prufungseinrichtung anzeigen kann, worin: 

die genannte ZugangsschlusselnachprGfungs- 
ein rich tung umfaBt: 

(a) eine Anregungsimpulszahlerzeugungsein- 
richtung fur die Erzeugung einer Anregungsim- 
puiszahl; 

(b) eine Einrichtung zur Erzeugung eines ande- 
ren Signals auf der Videosichtanzeige, das repra- 
sentativ fur die genannte Anregungsimpulszahl 
ist; und 

der genannte Zugangsschlussel umfaBt: 

(a) wenigstens einen Sensor, der von der 
AuBenseite des genannten Zugangsschlussels 
zuganglich ist, sodaB eine Gegenuberstellung des 
ZusangsschlGssels und der Videosichtanzeige die 
Erregung des Sensors durch das andere Signal 
bewirkt; 

(b) eine Einrichtung, die mit dem genannten 
Sensor gekoppelt ist, um das andere Signal zu 
dekodieren und die Anregungsimpulszahl zu 
erzeugen; 

(c) die genannte Kennworterstellungseinrich- 
tung umfassend eine Einrichtung zum Kombinie- 
ren der Anregungsimpulszahl mit dem Signal des 
Impulsgebers, um das Kennwort zu erstellen. 

13. System nach Anspruch 1 oder 2, worin der 
Rechner eine Sichtanzeige aufweist, die ein ande- 
res Signal von der ZugangsschlQsselnachprfl- 
fungseinrichtung anzeigen kann und worin: 

die genannte Zugangsschiusselnachprufungs- 
einrichtung umfaBt: 

(a) eine Anregungsimpulszahlerzeugungsein- 
richtung zum Erzeugen einer Anregungsimpuls- 
zahl; 

(b) eine Einrichtung zum Erzeugen eines ande- 
ren Signals auf der Rechnersichtanzeige, das 
reprasentativ fQr die genannte Anregungsimpuls- 
zahl ist; und 

der genannte Zugangsschlussel umfa&t: 

(a) eine Einrichtung zum Eingeben und Deko- 
dieren des anderen Signals, um die Anregungs- 
impulszahl zu erzeugen; 

(b) die genannte Kennworterstellungseinrich- 
tung umfassend eine Einrichtung zum Kombinie- 
ren der Anregungsimpulszahl mit dem Signal von 
dem Impulsgeber, um das Kennwort zu erstellen. 

14. System nach Anspruch 1, worin 

die Kennworterstellungseinrichtung des Zug- 
angsschlussels dazu ausgebildet ist, das Kenn- 
wort durch Verschlusseln des Signals von der 
Impulsgebereinrichtung zu erstellen und 

die Einrichtung der Zugangsschlusselnachprfl- 
fungseinrichtung zur Verarbeitung der Zeitein- 
gabe dazu ausgebildet ist, das Kennwort zu ent- 
schlQsseln, sodaB das interne Kennwort ein ent- 
schlusseltes Kennwort ist. 

15. System nach Anspruch 14, worin der Rech- 
ner eine Videosichtanzeige aufweist, die ein ande- 
res Signal von der ZugangsschlQsselnachpru- 
fungseinrichtung anzeigen kann und worin: 

die genannte Zugangsschlusselnachprufungs- 
einrichtung umfaBt: 



(a) eine Anregungsimpulszahlerzeugungsein- 
richtung zur Erzeugung einer Anregungsimpuls- 
zahl; . 

(b) eine Einrichtung zur Erzeugung eines ande- 
s ren Signals auf der Videosichtanzeige, das repra- 

sentativ fur die genannte Anregungsimpulszahl 
ist; und 

der genannte Zugangsschlussel umfaBt: 
(a) wenigstens einen Sensor, der von der 
io AuBenseite des genannten Zugangsschlussels 
zuganglich ist, sodaB die Gegenuberstellung des 
Zugangsschlussels und der Sichtanzeige die Erre- 
gung des Sensor durch das andere Signal 
bewirkt; 

is (b) eine Einrichtung, die mit dem genannten 
Sensor gekoppelt ist, um das andere Signal zu 
dekodieren und die Anrengungsimpulszahl zu 
erzeugen; 

(c) die genannte Kennworterstellungseinrich- 
20 tung umfassend eine Einrichtung zum Verschlus- 
seln der Anregungsimpulszahl mit dem Signal 
von der Impulsgebereinrichtung, um das Kenn- 
wort zu erstellen. 

16. System nach Anspruch 15, umfassend: 

25 eine Einrichtung zum ZShlen jedes Males, zu 
dem der Sensor durch die Videosichtanzeige des 
Rechners erregt wird; 

eine Einrichtung zum Sperren des Zugangs- 
schlussels, wenn der Zahler einen vorgegebenen 

30 Zahlerstand bzw. eine vorgegebene Zahlung 
erreicht. 

17. System nach Anspruch 14, worin der Rech- 
ner eine Sichtanzeige besitzt, die ein anderes 
Signal von der Zugangsschlusselnachprufungs- 

35 einrichtung anzeigen kann und worin: 

die genannte Zugangsschlusselnachprufungs- 
einrichtung umfaBt: 

(a) eine Anregungsimpulszahlerzeugungsein- 
richtung zur Erzeugung einer Anregungsimpuls- 

40 zahl; 

(b) eine Einrichtung zur Erzeugung eines ande- 
ren Signals auf der Rechnersichtanzeige, das 
reprasentativ fur die genannte Anregungsimpuls- 
zahl ist; und 

4$ der genannte Zugangsschlussel umfassend: 

(a) eine Einrichtung zum Eingeben und Deko- 
dieren des anderen Signals, um die Anregungs- 
impulszahl zu erzeugen; 

(b) die genannte Kennworterstellungseinrich- 
50 tung umfassend eine Einrichtung zum Verschlus- 
seln der Anregungsimpulszahl mit dem Signal 
der Impulsgebereinrichtung, um das Kennwort zu 
erstellen. 

18. Zugangsschlussel (12) zur Schaffung des 
55 Zugangs eines BenOtzers zu einem Softwarepro- 

gramm, der genannte ZugangsschlGssel umfas- 
send; 

(a) eine Impulsgebereinrichtung (60) zur Erzeu- 
gung eine Reihe von Impulsen, die vom Zeitab- 

60 lauf abhangig sind; 

(b) Kennworteinrichtungen (62, 64), die mit der 
genannten Impulsgebereinrichtung gekoppelt 
sind, um ein Kennwort fur einen oder mehrere 
Impulse der genannten Impulsgebereinrichtung 

65 (60) zu erstellen; 
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(c) eine Sichtanzeigeeinrichtung (18), die mit 
der Kennworterstellungseinrichtung (62, 64) in 
Verbindung stent, um wenigstens einen Teil des 
genannten Kennwortes anzuzeigen; 

(d) wenigstens einen Sensor (28), der von der 
AuBenseite des genannten Zugangsschlussels 
(12) zuganglich ist, sodaB ein kodierter Anre- 
gungsimpuls vom genannten Zugangsschlussel 
(12) empfangen werden kann; 

(e) eine Einrichtung (60), die mit dem genann- 
ten Sensor zum Dekodieren der Anregungsim- 
puiszahl gekoppelt ist; 

(f) die genannte Kennworterstellungseinrich- 
tung zum Kombinieren der Anregungsimpulszahl 
mit dem Impuis oder den Impulsen vom Impuls- 
geber (60), um das Kennwort zu ersteilen. 

19. Zugangsschlussel nach Anspruch 18, worin 
die genannte Kennworterstellungseinrichtung 
(62, 64) eine Basisworterstellungseinrichtung (62) 
umfaBt, die mit der genannten Impulsgeberein- 
richtung (60) verbunden ist, um ein Basiswort zu 
ersteilen, das eine Funktion von Impulsen it, die 
von der genannten Impulsgebereinrichtung (60) 
erzeugt werden; und 

die genannten Kennworterstellungseinrichtun- 
gen (62, 64) welters eine Einrichtung (64) zum 
Kombinieren der Anregungsimpulszahl mit dem 
Basiswort umfassen, um das Kennwort zu erstei- 
len und einem Benutzer Zugang zu einem Softwa- 
re prog ram m zu verschaffen. 

20. ZugangsschlOssel nach Anspruch 18 oder 
19, worin der genannte Zugangsschlussel 
umfaBt: 

eine Zeitbegrenzungsza hi einrichtung zum Zah- 
len von Impulsen; 

eine Einrichtung zum Koppeln der genannten 
Zeitbegrenzungszahleinrichtung mit der genann- 
ten Impulsgebereinrichtung, um die von dieser 
erzeugte Anzahl von Impulsen zu zahlen; und 

eine Einrichtung zum Sperren des genannten 
Zugangsschlussels, wenn der genannte Zeitbe- 
grenzungsza hi er eine vorgegebene Anzahl von 
Impulsen von der genannten Impulsgebereinrich- 
tung gezahlt hat. 

Revendications 

1. Un systeme pour permettre I'acces par un 
utilisateur a un programme de logiciel residant 
dans un ordinateur (34), comprenant une cief 
d'acces (12) susceptible de produire un mot de 
passe et d'etre transportee independamment de 
I'ordinateur (34, 68) et un moyen de verification 
de la clef d'acces adapte pour etre residant dans 
I'ordinateur (34, 68) pour verifier un mot de passe 
produit par la clef d'acces (12) et autorisant 
I'acces et I'utilisation au programme de logiciel; 
caracterise en ce que: 

ladite clef d'acces (12) com p rend: 

(a) un moyen de production d'impulsions (30, 
60) pour produire un signal qui depend de recou- 
pment du temps; 

(b) au moyen de production d'un mot de passe 
(32, 64) couple au moyen de production d'impul- 
sions (30, 60) pour produire un mot de passe a 



partir du signal du moyen de production d'impul- 
sions (30, 60); 

(c) un moyen de visualisation (18) commini- 
quant avec le moyen de production de mot de 
5 passe (32) pour visualiser au moins une partie 
dud it mot de passe; et 

te moyen de verification de la clef d'acces 
comprend: 

(a) un moyen (40, 70) pour recevoir au moins 
10 initialement une entree de temps; 

(b) un moyen (42, 72) pour recevoir le mot de 
passe tel que produit par le clef d'acces (12) et 
entre par ('utilisateur; 

(c) un moyen (46, 88) pour traiter I'entree de 
is temps pour produire un mot de passe interne; 

(d) un moyen (48, 49; 92, 94) pour determiner si 
le mot de passe interne porte une relation pres- 
erve avec le mot de passe produit par ladite clef 
d'acces (12); 

20 (e) un moyen (50, 96) pour permettre I'acces au 
programme de logiciel si la relation prescrite 
extste. 

2. Un systeme selon la revendication 1 ou: 

le moyen de production d'impulsions p recite 
25 (30, 60) comprend un moyen pour produire selon 
un algorithme present un mot de passe constitue 
d'un train de caracteres; et 

le moyen de visualisation precite (18) com- 
prend un moyen pour visualiser au moins un 
30 caractere representatif dudit train de caracteres. 

3. Un systeme selon la revendication 1 ou la 
revendication 2, ou I'ordinateur a un affichage 
video (D), qui peut afflcher un autre signal du 
moyen de verification de la clef d'acces, et ou: 

35 le moyen de verification de la clef d'acces 
comprend de plus: 

(a) un moyen de production d'un nombre sti- 
mulant (86) pour produire un nombre stimulant; 

(b) un moyen pour produire un autre signal sur 
40 ('affichage video (D) qui est representatif dudit 

nombre stimulant; et 
la clef d'acces comprend de plus: 

(a) au moins un detecteur (28) accessible de 
I'exterieur de ladite clef d'acces de sorte que la 

45 juxtaposition de la clef d'acces (12) et de I 'affi- 
chage (D) permette I'excitation du detecteur (28) 
par ('autre signal; 

(b) un moyen (66) couple audit detecteur (28) 
pour decoder I'autre signal pour produire le nom- 

50 bre stimulant; 

(c) le moyen de production du mot de passe (62, 
64) comprenant un moyen de production d'un 
mot de base (62) communiquant avec le moyen 
de production d'impulsions (60) pour produire un 

55 mot de base qui est une fonction du signal produit 
par le moyen de production d'impulsions (60); 

(d) le moyen de production du mot de passe 
(62, 64) comprenant un moyen (64) pour combi- 
ner le nombre stimulant au mot de base pour 

60 produire le mot de passe. 

4. Un systeme selon la revendication 3 ou la clef 
d'acces (12) precitee comprend: 

un moyen (200) pour compter chaque fois que 
le detecteur precite est excite par I'autre signal sur 
65 I'affichage video; et 
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un moyen (206) pour desactiver la clef d'acces 
lorsque le compte sur le moyen de comptage 
atteint un compte predetermined 

5. Un systeme selon la revendication 1 ou ta 
revendication 2, ou I'ordinateur a un affichage, 
qui peut afficher un autre du moyen de verifica- 
tion de la clef d'acces et ou: 

le moyen de verification de la clef d'acces 
comprend: 

(a) un moyen de production d'un nombre sti- 
mulant pour produire un nombre stimulant; 

(b) un moyen pour produire un autre signal a 
I'affichage de I'ordinateur qui est representatif 
dudit nombre stimulant; et 

la clef d'acces pr6cit6e comprend de plus: 

(a) un moyen pour entrer et decoder I'autre 
signal pour produire le nombre stimulant; 

(b) le moyen de production du mot de passe 
precite comprenant un moyen de production d'un 
mot de base communiquant avec le moyen de 
production d'impulsions pour produire un mot de 
base qui est une fonction du signal produit par le 
moyen de production d'impulsions; 

(c) le moyen de production du mot de passe 
comprenant un moyen pour combiner le nombre 
stimulant au mot de base pour produire le mot de 
passe. 

6. Un systeme selon la revendication 1 ou la 
revendication 2, ou la clef d'acces comprend: 

le signal precit6 du moyen de production d'im- 
pulsions produisant une s6rie d'impulsions; 

un moyen compteur de limitation de temps 
pour compter des impulsions; 

un moyen pour coupler le moyen compteur de 
limite de temps au moyen de production d'impul- 
sions pour compter le nombre d'impulsions pro- 
duit ainsi; et 

un moyen pour d6sactiver ladite clef lorsque le 
compteur de limite de temps a compte un nombre 
predetermine d'impulsions du dispositif d'impul- 
sions. 

7. Un systeme selon la revendication 1 ou la 
revendication 2, ou le moyen de production du 
mot de passe p recite de la clef d'acces precitee 
comprend: 

(a) un premier registre initialise a un etat fixe 
qui identifie uniquement la clef d'acces; 

(b) un second registre pour retenir seiective- 
ment le signal du moyen de production d'impul- 
sions; 

(c) un moyen pour coupler le moyen de produc- 
tion d'impulsions audit second registre; 

(d) un moyen pour synchroniser des sorties 
desdits premier et second registres pour produire 
ledit mot de passe; et le moyen de verification de 
la clef d'acces comprend: 

(a) un moyen pour etre initialise a un 6tat fixe 
uniquement associe a I'etat fixe dudit premier 
registre de ladite clef d'acces. 

8. Un systeme selon la revendication 7 avec 
I'ordinateur ayant un affichage video qui peut 
visualiser un autre signal du moyen de verifica- 
tion de la clef d'acces, ou: 

le moyen de verification de la clef d'acces 
comprend: 



(a) un moyen pour produire un nombre stimu- 
lant; 

(b) un moyen pour produire un autre signal sur 
I'affichage vid6o qui est representatif dudit nom- 

5 bre stimulant; 

la clef d'accds comprend: 
(a) au moins un detecteur accessible de I'ext6- 
rieur de ladite clef d'acces de sorte que la juxtapo- 
sition de la clef d'acces et de I'affichage permette 
10 I'excitation du detecteur par I'autre signal; 

(b> un troisieme registre pour retenir s6lective- 
ment I'autre signal a I'affichage vid6o; 

(c) un moyen pour communiquer le detecteur 
dudit troisieme registre de sorte que I'autre signal 

is puisse modifier I'etat du troisieme registre selon 
la nombre stimulant; et 

(c) le moyen de synchronisation comprend un 
moyen pour synchroniser une sortie du troisieme 
registre h la sortie desdits premier et second 

20 registres pour produire ledit mot de passe. 

9. Un systeme selon la revendication 7, ou la 
clef d'acces comprend: 

un certain nombre de moyens de contacts 
accessibles de 1'exterieur de la clef d'acces pour 
25 initialiser la clef d'acces; 

un moyen pour coupler I'un desdits contacts au 
premier registre pr6cite et un autre desdits 
contacts au second registre precite; et 
un moyen pour rendre le contact immunise a la 
30 reinitialisation. 

10. Un systeme selon la revendication 9, ou 
le moyen rendant precite comprend un moyen 
pour isoler les contacts precites apr6s initialisa- 
tion. 

35 11. Un syst6me selon la revendication 9 r ou la 
revendication 10, ou la clef d'acces pr6citee com- 
prend: 
un troisieme contact; 

un moyen pour communiquer ledit troisieme 
40 contact au moyen de synchronisation precite; 

ou le moyen de synchronisation comprend un 
moyen pour valider les premier et second regis- 
tres precit6s en reponse a un signal d'initialisation 
applique au troisieme contact 
45 12. Un systeme seion la revendication 1 ou la 
revendication 2, ou I'ordinateur a un affichage 
video qui peut visualiser un autre signal du 
moyen de verification de la clef d'acces, ou: 
le moyen de verification de la clef d'acces 
so comprend: 

(a) un moyen de production d'un nombre sti- 
mulant pour produire un nombre stimulant; 

(b) un moyen pour produire un autre signal a 
I'affichage video qui est representatif dudit nom- 

55 bre stimulant; et 

la clef d'acces comprend: 

(a) au moins un detecteur accessible de 1'exte- 
rieur de la clef d'acces de sorte que la juxtaposi- 
tion de la clef d'acces et de I'affichage permette 

60 I'excitation du detecteur par I'autre signal; 

(b) un moyen couple audit detecteur pour deco- 
der I'autre signal pour produire le nombre stimu- 
lant; 

(c) le moyen de production du mot de passe 
65 comprenant un moyen pour combiner le nombre 
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stimulant au signal du generateur d'impulsions 
pour prod u i re le mot de passe. 

13. Un systeme selon la revendication 1 ou la 
revendication 2, ou I'ordinateur a un affichage qui 
peut afficher un autre signal du moyen de verifi- 
cation de la clef d'acces, et ou: 

le moyen de verification de la clef d'acces 
comprend: 

(a) un moyen de production d'un nombre 
stimulant pour produire un nombre stimulant; 

(b) un moyen pour produire un autre signal a 
l'affichage de I'ordinateur qui est representatif 
dudit nombre stimulant; et 

la clef d'acces comprend: 

(a) un moyen pour entrer et decoder I'autre 
signal pour produire le nombre stimulant; 

(b) un moyen de production du mot de passe 
comprenant un moyen pour combiner le nombre 
stimulant au signal du generateur d'impulsions 
pour produire le mot de passe. 

14. Un systeme selon la revendication 1 ou 

le moyen de production du mot de passe de la 
clef d'acces est adapte* pour produire le mot de 
passe par encryptage du signal du moyen de 
production d'impulsions, et 

le moyen du moyen de verification de la clef 
d'acces pour tralter I'entree de temps est adapte 
pour decrypter le mot de passe, de sorte que le mot 
de passe interne soit un mot de passe decrypted 

15. Un systeme selon la revendication 14, ou 
I'ordinateur a un affichage video qui peut visual!- 
ser un autre signal du moyen de verification de la 
clef d'acces, et ou: 

le moyen de verification de la clef d'acces com- 
prend: 

(a) un moyen de production d'un nombre sti- 
mulant pour produire un nombre stimulant; 

(b) un moyen pour produire un autre signal a 
l'affichage video qui est representatif dudit nom- 
bre stimulant; et 

la clef d'acces comprend: 

(a) au moins un detecteur accessible de i'exte- 
rieur de la clef d'acces de sorte que la juxtaposi- 
tion de la clef d'acces et de l'affichage permette 
I'excitatlon du detecteur par I'autre signal; 

(b) un moyen couple audit detecteur pour deco- 
der I'autre signal pour produire le nombre 
stimulant; 

(c) le moyen de production du mot de passe 
comprenant un moyen pour encrypter le nombre 
stimulant au signal de moyen de production 
d'impulsions pour produire le mot de passe. 

16. Un systeme selon la revendication 15, com- 
prenanant: 

un moyen pour compter chaque fois que le 
detecteur est excite par l'affichage video de 
I'ordinateur; 

un moyen pour desactiver la clef d'acces lorsque 
le compteur attaint un compte predetermined 

17. Un systeme selon la revendication 14, ou 
I'ordinateur a un affichage qui peut visualiser un 
autre signal du moyen de verification de la clef 
d'acces, et ou: 

le moyen de verification de la clef d'acces 
comprend: 



(a) un moyen de production d'un nombre sti- 
mulant pour produire un nombre stimulant; 

(b) un moyen pour produire un autre signal a 
l'affichage de I'ordinateur qui est representatif 

s dudit nombre stimulant; et 
la clef d'acces comprend: 

(a) un moyen pour entrer et decoder I'autre 
signal pour produire le nombre stimulant; 

(b) un moyen de production du mot de passe 
io comprenant un moyen pour encrypter le nombre 

stimulant avec le signal du moyen de production 
d'impulsions pour produire le mot de passe. 

18. Une clef d'acces (12) pour permettre I'acces 
par un utilisateur a un programme de togiciel, la 

is clef d'acces comprenant: 

(a) un moyen de production d'impulsions (60) 
pour produire un serte d'impulsions qui sont 
dependantes de recoupment du temps; 

(b) un moyen de production d'un mot de passe 
20 (62, 64) couple au moyen de production d'impul- 
sions pour produire un mot de passe pour Tune 
ou ptusieurs impulsions du moyen de production 
d'impulsions (60); 

(c) un moyen de visualisation (18) communi- 
25 quant avec le moyen de production du mot de 

passe (62, 64) pour visualiser au moins une partie 
dudit mot de passe; 

(d) au moins un detecteur (28) accessible de 
I'exterieur de la clef d'acces (12) de sorte qu'un 

30 nombre stimulant code soit recevable par la clef 
d'acces (12); 

(e) un moyen (60) couple audit detecteur pour 
decoder le nombre stimulant; 

(f) le moyen de production du mot de passe 
35 pour combiner le nombre stimulant a I'une ou 

plus des impulsions du generateur d'impulsions 
(60) pour produire le mot de passe. 

19. Une clef d'acces selon la revendication 18 
ou le moyen de production du mot de passe (62, 

40 64) comprend un moyen de production d'un mot 
de base (62) communiquant avec le moyen de 
production d'impulsions (60) pour produire un 
mot de base qui est une fonction des impulsions 
produites par le moyen de production d'impul- 

45 sions (60); et 

le moyen de production du mot de passe (62, 
64) comprend de plus un moyen (64) pour combi- 
ner le nombre stimulant au mot de base pour 
produire le mot de passe pour permettre a un 

so utilisateur d'acceder a un programme de logiciel; 

20. Une clef d'acces selon la revendication 18, 
ou la revendication 19, ou la clef d'acces com- 
prend: 

un moyen compteur de limite de temps pour 

55 compter des impulsions; 

un moyen pour coupler ledit moyen compteur 
de limite de temps au moyen de production 
d'impulsions precite pour compter le nombre 
d'impulsions produites ainsi; et 

eo un moyen pour desactiver la clef d'acces lors- 
que le compteur de limite de temps a compte un 
nombre predetermine d'impulsions du dispositif 
de production d'impulsions. 
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